TIKA-4456: update guava, jackson, reactor core, zstd, plexus, google cloud, bc, commons-codec, commons-collections, junrar, netty, woodstox; introduce jspecify because of conflicts

Author: THausherr

tika-parent/pom.xml

@@ -309,7 +309,7 @@
     <rat.version>0.16.1</rat.version>
 
     <!-- dependency versions -->
-    <google.cloud.version>2.70.0</google.cloud.version>
+    <google.cloud.version>2.71.0</google.cloud.version>
     <azure.version>1.3.8</azure.version>
     <aws.version>1.12.797</aws.version>
     <!-- WARNING: when you upgrade asm make sure that you update the
@@ -319,12 +319,12 @@
     <asm.version>9.10.1</asm.version>
     <boilerpipe.version>1.1.0</boilerpipe.version>
     <!-- used by POI, PDFBox and Jackcess ...try to sync -->
-    <bouncycastle.version>1.85</bouncycastle.version>
+    <bouncycastle.version>1.85.2</bouncycastle.version>
     <!-- NOTE: sync brotli version with commons-compress-->
     <brotli.version>0.1.2</brotli.version>
     <commons.cli.version>1.11.0</commons.cli.version>
-    <commons.codec.version>1.22.0</commons.codec.version>
-    <commons.collections4.version>4.5.0</commons.collections4.version>
+    <commons.codec.version>1.22.1</commons.codec.version>
+    <commons.collections4.version>4.6.0</commons.collections4.version>
     <commons.compress.version>1.28.0</commons.compress.version>
     <commons.csv.version>1.14.1</commons.csv.version>
     <commons.exec.version>1.6.0</commons.exec.version>
@@ -342,7 +342,7 @@
     <dl4j.version>1.0.0-M2</dl4j.version>
     <!-- fakeload versions > 0.4.0 require java > 8 -->
     <fakeload.version>0.4.0</fakeload.version>
-    <guava.version>33.6.0-jre</guava.version>
+    <guava.version>33.7.1-jre</guava.version>
     <hdf5.version>1.14.3-1.5.10</hdf5.version>
     <httpcomponents.version>4.5.14</httpcomponents.version>
     <httpcore.version>4.4.16</httpcore.version>
@@ -351,7 +351,7 @@
     <imageio.version>1.4.0</imageio.version>
     <!-- jackrabbit 2.21.23 requires java 11 -->
     <jackrabbit.version>2.21.22</jackrabbit.version>
-    <jackson.version>2.22.1</jackson.version>
+    <jackson.version>2.22.2</jackson.version>
     <jackcess.version>4.0.11</jackcess.version>
     <jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
     <javax.annotation.version>1.3.2</javax.annotation.version>
@@ -372,7 +372,7 @@
     <json.simple.version>1.1.1</json.simple.version>
     <junit4.version>4.13.2</junit4.version>
     <junit5.version>5.14.4</junit5.version>
-    <junrar.version>7.6.0</junrar.version>
+    <junrar.version>8.1.0</junrar.version>
     <libpst.version>0.9.3</libpst.version>
     <log4j2.version>2.26.1</log4j2.version>
     <!-- lucene >= 9.x requires Java 11 -->
@@ -383,7 +383,7 @@
     <!-- mockito >= 5 requires jdk11 -->
     <mockito.version>4.11.0</mockito.version>
     <netcdf-java.version>4.5.5</netcdf-java.version>
-    <netty.version>4.2.16.Final</netty.version>
+    <netty.version>4.2.17.Final</netty.version>
     <oak.jackrabbit.version>2.4.0</oak.jackrabbit.version>
     <openjson.version>1.0.13</openjson.version>
     <!-- 2.0.0 doesn't compile with jdk8 -->
@@ -399,7 +399,7 @@
     <poi.version>5.5.1</poi.version>
     <!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module -->
     <quartz.version>2.4.1</quartz.version>
-    <reactor.core.version>3.8.6</reactor.core.version>
+    <reactor.core.version>3.8.7</reactor.core.version>
     <reactor.netty.version>1.3.6</reactor.netty.version>
     <rome.version>2.1.0</rome.version>
     <scm.version>2.2.1</scm.version>
@@ -424,7 +424,7 @@
     <vorbis.version>0.8</vorbis.version>
     <xerces.version>2.12.2</xerces.version>
     <xmpcore.version>6.1.11</xmpcore.version>
-    <zstd.version>1.5.7-12</zstd.version>
+    <zstd.version>1.5.7-15</zstd.version>
     <!-- 4.0.0 doesn't compile with jdk8 -->
     <kafka.version>3.9.2</kafka.version>
     <snappy.java.version>1.1.10.8</snappy.java.version>
@@ -440,6 +440,13 @@
   <dependencyManagement>
     <dependencies>
       <!-- boms -->
+      <dependency>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bc-jdk18on-bom</artifactId>
+          <version>${bouncycastle.version}</version>
+          <type>pom</type>
+          <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>com.fasterxml.jackson</groupId>
         <artifactId>jackson-bom</artifactId>
@@ -521,7 +528,7 @@
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>7.2.1</version>
+        <version>7.2.2</version>
       </dependency>
       <dependency>
         <groupId>com.beust</groupId>
@@ -859,21 +866,6 @@
         <artifactId>zookeeper</artifactId>
         <version>${zookeeper.version}</version>
       </dependency>
-      <dependency>
-        <groupId>org.bouncycastle</groupId>
-        <artifactId>bcmail-jdk18on</artifactId>
-        <version>${bouncycastle.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.bouncycastle</groupId>
-        <artifactId>bcpkix-jdk18on</artifactId>
-        <version>${bouncycastle.version}</version>
-      </dependency>
-      <dependency>
-        <groupId>org.bouncycastle</groupId>
-        <artifactId>bcprov-jdk18on</artifactId>
-        <version>${bouncycastle.version}</version>
-      </dependency>
       <dependency>
         <groupId>org.ccil.cowan.tagsoup</groupId>
         <artifactId>tagsoup</artifactId>
@@ -882,12 +874,12 @@
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-utils</artifactId>
-        <version>4.0.3</version>
+        <version>4.1.0</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-classworlds</artifactId>
-        <version>2.12.0</version>
+        <version>2.12.1</version>
       </dependency>
       <dependency>
         <groupId>org.freemarker</groupId>
@@ -1039,6 +1031,12 @@
           <artifactId>hdf5-platform</artifactId>
           <version>${hdf5.version}</version>
       </dependency>
+      <!-- TODO try removing with next update of reactor core -->
+      <dependency>
+        <groupId>org.jspecify</groupId>
+        <artifactId>jspecify</artifactId>
+        <version>1.0.1</version>
+      </dependency>      
     </dependencies>
   </dependencyManagement>